@dexto/core 1.7.1 → 1.8.0

package/dist/approval/error-codes.d.ts

@@ -13,7 +13,7 @@ export declare enum ApprovalErrorCode {
     APPROVAL_PROVIDER_NOT_CONFIGURED = "approval_provider_not_configured",
     APPROVAL_PROVIDER_ERROR = "approval_provider_error",
     APPROVAL_NOT_FOUND = "approval_not_found",
-    APPROVAL_TOOL_APPROVAL_DENIED = "approval_tool_confirmation_denied",
+    APPROVAL_TOOL_APPROVAL_DENIED = "approval_tool_approval_denied",
     APPROVAL_ELICITATION_DENIED = "approval_elicitation_denied",
     APPROVAL_ELICITATION_VALIDATION_FAILED = "approval_elicitation_validation_failed",
     APPROVAL_CONFIG_INVALID = "approval_config_invalid"

package/dist/approval/error-codes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error-codes.d.ts","sourceRoot":"","sources":["../../src/approval/error-codes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,oBAAY,iBAAiB;IAEzB,wBAAwB,6BAA6B;IACrD,yBAAyB,8BAA8B;IACvD,yBAAyB,8BAA8B;IACvD,uBAAuB,4BAA4B;IAGnD,gBAAgB,qBAAqB;IAGrC,kBAAkB,uBAAuB;IACzC,sBAAsB,2BAA2B;IAGjD,gCAAgC,qCAAqC;IACrE,uBAAuB,4BAA4B;IACnD,kBAAkB,uBAAuB;IAGzC,6BAA6B,sCAAsC;IACnE,2BAA2B,gCAAgC;IAC3D,sCAAsC,2CAA2C;IAGjF,uBAAuB,4BAA4B;CACtD"}
+{"version":3,"file":"error-codes.d.ts","sourceRoot":"","sources":["../../src/approval/error-codes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,oBAAY,iBAAiB;IAEzB,wBAAwB,6BAA6B;IACrD,yBAAyB,8BAA8B;IACvD,yBAAyB,8BAA8B;IACvD,uBAAuB,4BAA4B;IAGnD,gBAAgB,qBAAqB;IAGrC,kBAAkB,uBAAuB;IACzC,sBAAsB,2BAA2B;IAGjD,gCAAgC,qCAAqC;IACrE,uBAAuB,4BAA4B;IACnD,kBAAkB,uBAAuB;IAGzC,6BAA6B,kCAAkC;IAC/D,2BAA2B,gCAAgC;IAC3D,sCAAsC,2CAA2C;IAGjF,uBAAuB,4BAA4B;CACtD"}

package/dist/approval/error-codes.js

@@ -1,4 +1,4 @@
-import "../chunk-PTJYTZNU.js";
+import "../chunk-C6A6W6XS.js";
 var ApprovalErrorCode = /* @__PURE__ */ ((ApprovalErrorCode2) => {
   ApprovalErrorCode2["APPROVAL_INVALID_REQUEST"] = "approval_invalid_request";
   ApprovalErrorCode2["APPROVAL_INVALID_RESPONSE"] = "approval_invalid_response";
@@ -10,7 +10,7 @@ var ApprovalErrorCode = /* @__PURE__ */ ((ApprovalErrorCode2) => {
   ApprovalErrorCode2["APPROVAL_PROVIDER_NOT_CONFIGURED"] = "approval_provider_not_configured";
   ApprovalErrorCode2["APPROVAL_PROVIDER_ERROR"] = "approval_provider_error";
   ApprovalErrorCode2["APPROVAL_NOT_FOUND"] = "approval_not_found";
-  ApprovalErrorCode2["APPROVAL_TOOL_APPROVAL_DENIED"] = "approval_tool_confirmation_denied";
+  ApprovalErrorCode2["APPROVAL_TOOL_APPROVAL_DENIED"] = "approval_tool_approval_denied";
   ApprovalErrorCode2["APPROVAL_ELICITATION_DENIED"] = "approval_elicitation_denied";
   ApprovalErrorCode2["APPROVAL_ELICITATION_VALIDATION_FAILED"] = "approval_elicitation_validation_failed";
   ApprovalErrorCode2["APPROVAL_CONFIG_INVALID"] = "approval_config_invalid";

package/dist/approval/errors.cjs

@@ -206,7 +206,7 @@ class ApprovalError {
       case "system_denied":
         message = customMessage ?? `Tool execution denied by system policy: ${toolName}`;
         suggestions = [
-          "Tool is in the alwaysDeny list",
+          "Tool was blocked by host policy",
           "Check permissions.toolPolicies in agent configuration"
         ];
         break;
@@ -219,10 +219,7 @@ class ApprovalError {
         break;
       default:
         message = customMessage ?? `Tool execution denied: ${toolName}`;
-        suggestions = [
-          "Approve the tool in the confirmation dialog",
-          "Check tool permissions"
-        ];
+        suggestions = ["Approve the tool in the approval dialog", "Check tool permissions"];
     }
     const context = {
       toolName

package/dist/approval/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/approval/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAyB,MAAM,oBAAoB,CAAC;AAE9E,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE7D;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;GAEG;AACH,qBAAa,aAAa;IACtB;;OAEG;IACH,MAAM,CAAC,cAAc,CACjB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,yBAAyB,GACpC,iBAAiB,CAAC,yBAAyB,CAAC;IAW/C;;OAEG;IACH,MAAM,CAAC,eAAe,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,yBAAyB,GACpC,iBAAiB,CAAC,yBAAyB,CAAC;IAe/C;;OAEG;IACH,MAAM,CAAC,eAAe,CAClB,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,MAAM,GACf,iBAAiB,CAAC,yBAAyB,CAAC;IAW/C;;OAEG;IACH,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,CAAC,yBAAyB,CAAC;IAWlF;;OAEG;IACH,MAAM,CAAC,OAAO,CACV,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,GACnB,iBAAiB,CAAC,sBAAsB,CAAC;IAyB5C;;OAEG;IACH,MAAM,CAAC,SAAS,CACZ,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,YAAY,EAClB,MAAM,CAAC,EAAE,MAAM,GAChB,iBAAiB,CAAC,2BAA2B,CAAC;IAuBjD;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,2BAA2B,CAAC;IAoBpF;;OAEG;IACH,MAAM,CAAC,qBAAqB,IAAI,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAcxE;;OAEG;IACH,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,iBAAiB,CAAC;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAiB3F;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,iBAAiB,CAAC;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAc9E;;OAEG;IACH,MAAM,CAAC,kBAAkB,CACrB,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,YAAY,EACrB,aAAa,CAAC,EAAE,MAAM,EACtB,SAAS,CAAC,EAAE,MAAM,GACnB,iBAAiB,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,YAAY,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAgDrF;;OAEG;IACH,MAAM,CAAC,iBAAiB,CACpB,UAAU,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,YAAY,EACrB,aAAa,CAAC,EAAE,MAAM,EACtB,SAAS,CAAC,EAAE,MAAM,GACnB,iBAAiB,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,YAAY,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA0EvF;;OAEG;IACH,MAAM,CAAC,2BAA2B,CAC9B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EAAE,EAChB,UAAU,EAAE,MAAM,GACnB,iBAAiB,CAAC,4BAA4B,CAAC;IAWlD;;OAEG;IACH,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAU9E"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/approval/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAyB,MAAM,oBAAoB,CAAC;AAE9E,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE7D;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;GAEG;AACH,qBAAa,aAAa;IACtB;;OAEG;IACH,MAAM,CAAC,cAAc,CACjB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,yBAAyB,GACpC,iBAAiB,CAAC,yBAAyB,CAAC;IAW/C;;OAEG;IACH,MAAM,CAAC,eAAe,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,yBAAyB,GACpC,iBAAiB,CAAC,yBAAyB,CAAC;IAe/C;;OAEG;IACH,MAAM,CAAC,eAAe,CAClB,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,MAAM,GACf,iBAAiB,CAAC,yBAAyB,CAAC;IAW/C;;OAEG;IACH,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,CAAC,yBAAyB,CAAC;IAWlF;;OAEG;IACH,MAAM,CAAC,OAAO,CACV,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,GACnB,iBAAiB,CAAC,sBAAsB,CAAC;IAyB5C;;OAEG;IACH,MAAM,CAAC,SAAS,CACZ,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,YAAY,EAClB,MAAM,CAAC,EAAE,MAAM,GAChB,iBAAiB,CAAC,2BAA2B,CAAC;IAuBjD;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,2BAA2B,CAAC;IAoBpF;;OAEG;IACH,MAAM,CAAC,qBAAqB,IAAI,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAcxE;;OAEG;IACH,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,iBAAiB,CAAC;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAiB3F;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,iBAAiB,CAAC;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAc9E;;OAEG;IACH,MAAM,CAAC,kBAAkB,CACrB,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,YAAY,EACrB,aAAa,CAAC,EAAE,MAAM,EACtB,SAAS,CAAC,EAAE,MAAM,GACnB,iBAAiB,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,YAAY,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA6CrF;;OAEG;IACH,MAAM,CAAC,iBAAiB,CACpB,UAAU,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,YAAY,EACrB,aAAa,CAAC,EAAE,MAAM,EACtB,SAAS,CAAC,EAAE,MAAM,GACnB,iBAAiB,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,YAAY,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA0EvF;;OAEG;IACH,MAAM,CAAC,2BAA2B,CAC9B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EAAE,EAChB,UAAU,EAAE,MAAM,GACnB,iBAAiB,CAAC,4BAA4B,CAAC;IAWlD;;OAEG;IACH,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAU9E"}

package/dist/approval/errors.js

@@ -1,4 +1,4 @@
-import "../chunk-PTJYTZNU.js";
+import "../chunk-C6A6W6XS.js";
 import { DextoRuntimeError, ErrorScope, ErrorType } from "../errors/index.js";
 import { ApprovalErrorCode } from "./error-codes.js";
 class ApprovalError {
@@ -184,7 +184,7 @@ class ApprovalError {
       case "system_denied":
         message = customMessage ?? `Tool execution denied by system policy: ${toolName}`;
         suggestions = [
-          "Tool is in the alwaysDeny list",
+          "Tool was blocked by host policy",
           "Check permissions.toolPolicies in agent configuration"
         ];
         break;
@@ -197,10 +197,7 @@ class ApprovalError {
         break;
       default:
         message = customMessage ?? `Tool execution denied: ${toolName}`;
-        suggestions = [
-          "Approve the tool in the confirmation dialog",
-          "Check tool permissions"
-        ];
+        suggestions = ["Approve the tool in the approval dialog", "Check tool permissions"];
     }
     const context = {
       toolName

package/dist/approval/factory.cjs

@@ -18,13 +18,27 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var factory_exports = {};
 __export(factory_exports, {
-  createApprovalRequest: () => createApprovalRequest
+  createApprovalRequest: () => createApprovalRequest,
+  createDeterministicApprovalId: () => createDeterministicApprovalId
 });
 module.exports = __toCommonJS(factory_exports);
 var import_crypto = require("crypto");
-function createApprovalRequest(details) {
+function createDeterministicApprovalId(key) {
+  const hash = (0, import_crypto.createHash)("sha256").update(key).digest("hex");
+  const variant = (Number.parseInt(hash.slice(16, 17), 16) & 3 | 8).toString(16);
+  const uuidHex = `${hash.slice(0, 12)}5${hash.slice(13, 16)}${variant}${hash.slice(17, 32)}`;
+  const approvalId = [
+    uuidHex.slice(0, 8),
+    uuidHex.slice(8, 12),
+    uuidHex.slice(12, 16),
+    uuidHex.slice(16, 20),
+    uuidHex.slice(20, 32)
+  ].join("-");
+  return approvalId;
+}
+function createApprovalRequest(details, approvalId = (0, import_crypto.randomUUID)()) {
   return {
-    approvalId: (0, import_crypto.randomUUID)(),
+    approvalId,
     type: details.type,
     sessionId: details.sessionId,
     hostRuntime: details.hostRuntime,
@@ -35,5 +49,6 @@ function createApprovalRequest(details) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  createApprovalRequest
+  createApprovalRequest,
+  createDeterministicApprovalId
 });

package/dist/approval/factory.d.ts

@@ -1,4 +1,6 @@
 import type { ApprovalRequest, ApprovalRequestDetails } from './types.js';
+type ApprovalId = ApprovalRequest['approvalId'];
+export declare function createDeterministicApprovalId(key: string): ApprovalId;
 /**
  * Factory function to create an approval request with generated ID and timestamp.
  *
@@ -8,5 +10,6 @@ import type { ApprovalRequest, ApprovalRequestDetails } from './types.js';
  * @param details - Simplified approval request details without ID and timestamp
  * @returns A complete ApprovalRequest with generated UUID and current timestamp
  */
-export declare function createApprovalRequest(details: ApprovalRequestDetails): ApprovalRequest;
+export declare function createApprovalRequest(details: ApprovalRequestDetails, approvalId?: ApprovalId): ApprovalRequest;
+export {};
 //# sourceMappingURL=factory.d.ts.map

package/dist/approval/factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../src/approval/factory.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAE1E;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,GAAG,eAAe,CAUtF"}
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../src/approval/factory.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAE1E,KAAK,UAAU,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;AAEhD,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAYrE;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACjC,OAAO,EAAE,sBAAsB,EAC/B,UAAU,GAAE,UAAyB,GACtC,eAAe,CAUjB"}

package/dist/approval/factory.js

@@ -1,8 +1,21 @@
-import "../chunk-PTJYTZNU.js";
-import { randomUUID } from "crypto";
-function createApprovalRequest(details) {
+import "../chunk-C6A6W6XS.js";
+import { createHash, randomUUID } from "crypto";
+function createDeterministicApprovalId(key) {
+  const hash = createHash("sha256").update(key).digest("hex");
+  const variant = (Number.parseInt(hash.slice(16, 17), 16) & 3 | 8).toString(16);
+  const uuidHex = `${hash.slice(0, 12)}5${hash.slice(13, 16)}${variant}${hash.slice(17, 32)}`;
+  const approvalId = [
+    uuidHex.slice(0, 8),
+    uuidHex.slice(8, 12),
+    uuidHex.slice(12, 16),
+    uuidHex.slice(16, 20),
+    uuidHex.slice(20, 32)
+  ].join("-");
+  return approvalId;
+}
+function createApprovalRequest(details, approvalId = randomUUID()) {
   return {
-    approvalId: randomUUID(),
+    approvalId,
     type: details.type,
     sessionId: details.sessionId,
     hostRuntime: details.hostRuntime,
@@ -12,5 +25,6 @@ function createApprovalRequest(details) {
   };
 }
 export {
-  createApprovalRequest
+  createApprovalRequest,
+  createDeterministicApprovalId
 };

package/dist/approval/index.d.ts

@@ -6,5 +6,5 @@ export { ApprovalErrorCode } from './error-codes.js';
 export { ApprovalError } from './errors.js';
 export type { ApprovalValidationContext, ApprovalTimeoutContext, ApprovalCancellationContext, ElicitationValidationContext, } from './errors.js';
 export { ApprovalManager } from './manager.js';
-export type { ApprovalManagerConfig } from './manager.js';
+export type { ApprovalDecisionInput, ApprovalManagerConfig, ApprovalRecordIdentity, ApprovalResponseRecord, } from './manager.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/approval/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/approval/index.ts"],"names":[],"mappings":"AAKA,YAAY,EACR,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,EAC1B,mBAAmB,EACnB,oBAAoB,GACvB,MAAM,YAAY,CAAC;AAKpB,OAAO,EACH,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,cAAc,EACd,YAAY,GACf,MAAM,YAAY,CAAC;AAGpB,OAAO,EACH,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,0BAA0B,EAC1B,yBAAyB,EACzB,4BAA4B,EAC5B,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,qBAAqB,EACrB,8BAA8B,EAC9B,6BAA6B,EAC7B,gCAAgC,EAChC,0BAA0B,EAC1B,0BAA0B,EAC1B,yBAAyB,EACzB,4BAA4B,EAC5B,sBAAsB,EACtB,4BAA4B,GAC/B,MAAM,cAAc,CAAC;AAEtB,YAAY,EACR,wBAAwB,EACxB,yBAAyB,EACzB,4BAA4B,EAC5B,2BAA2B,EAC3B,8BAA8B,GACjC,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,YAAY,EACR,yBAAyB,EACzB,sBAAsB,EACtB,2BAA2B,EAC3B,4BAA4B,GAC/B,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,YAAY,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/approval/index.ts"],"names":[],"mappings":"AAKA,YAAY,EACR,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,EAC1B,mBAAmB,EACnB,oBAAoB,GACvB,MAAM,YAAY,CAAC;AAKpB,OAAO,EACH,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,cAAc,EACd,YAAY,GACf,MAAM,YAAY,CAAC;AAGpB,OAAO,EACH,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,0BAA0B,EAC1B,yBAAyB,EACzB,4BAA4B,EAC5B,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,qBAAqB,EACrB,8BAA8B,EAC9B,6BAA6B,EAC7B,gCAAgC,EAChC,0BAA0B,EAC1B,0BAA0B,EAC1B,yBAAyB,EACzB,4BAA4B,EAC5B,sBAAsB,EACtB,4BAA4B,GAC/B,MAAM,cAAc,CAAC;AAEtB,YAAY,EACR,wBAAwB,EACxB,yBAAyB,EACzB,4BAA4B,EAC5B,2BAA2B,EAC3B,8BAA8B,GACjC,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,YAAY,EACR,yBAAyB,EACzB,sBAAsB,EACtB,2BAA2B,EAC3B,4BAA4B,GAC/B,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,YAAY,EACR,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,GACzB,MAAM,cAAc,CAAC"}

package/dist/approval/index.js

@@ -1,4 +1,4 @@
-import "../chunk-PTJYTZNU.js";
+import "../chunk-C6A6W6XS.js";
 import {
   APPROVAL_TYPES,
   APPROVAL_STATUSES,

package/dist/approval/manager.cjs

@@ -33,7 +33,9 @@ __export(manager_exports, {
 module.exports = __toCommonJS(manager_exports);
 var import_node_path = __toESM(require("node:path"), 1);
 var import_node_fs = require("node:fs");
+var import_node_util = require("node:util");
 var import_types = require("./types.js");
+var import_schemas = require("./schemas.js");
 var import_factory = require("./factory.js");
 var import_types2 = require("../logger/v2/types.js");
 var import_errors = require("./errors.js");
@@ -64,8 +66,8 @@ function tryRealpathSyncWithExistingParent(resolvedPath) {
   }
 }
 class ApprovalManager {
-  constructor(config, logger, sessionApprovalStore) {
-    this.sessionApprovalStore = sessionApprovalStore;
+  constructor(config, logger, approvalStore) {
+    this.approvalStore = approvalStore;
     this.config = config;
     this.logger = logger.createChild(import_types2.DextoLogComponent.APPROVAL);
     this.logger.debug(
@@ -77,6 +79,7 @@ class ApprovalManager {
   logger;
   loadedScopes = /* @__PURE__ */ new Set();
   scopeLocks = /* @__PURE__ */ new Map();
+  approvalRecordLocks = /* @__PURE__ */ new Map();
   scopes = /* @__PURE__ */ new Map();
   getScopeKey(sessionId) {
     return sessionId ?? GLOBAL_APPROVAL_SCOPE;
@@ -84,6 +87,9 @@ class ApprovalManager {
   getScopeLabel(sessionId) {
     return sessionId ?? "global";
   }
+  sessionScope(sessionId) {
+    return sessionId === void 0 ? {} : { sessionId };
+  }
   getApprovalTimeout(type, timeout) {
     return timeout ?? this.getDefaultTimeout(type);
   }
@@ -123,6 +129,23 @@ class ApprovalManager {
       }
     }
   }
+  async runWithApprovalRecordLock(approvalId, fn) {
+    const previousLock = this.approvalRecordLocks.get(approvalId) ?? Promise.resolve();
+    const currentResult = previousLock.catch(() => {
+    }).then(() => fn());
+    const currentLock = currentResult.then(
+      () => void 0,
+      () => void 0
+    );
+    this.approvalRecordLocks.set(approvalId, currentLock);
+    try {
+      return await currentResult;
+    } finally {
+      if (this.approvalRecordLocks.get(approvalId) === currentLock) {
+        this.approvalRecordLocks.delete(approvalId);
+      }
+    }
+  }
   snapshotToolPatterns(scopeKey) {
     const snapshot = {};
     for (const [toolName, patterns] of this.getScope(scopeKey).toolPatterns) {
@@ -144,7 +167,10 @@ class ApprovalManager {
       toolPatterns: this.snapshotToolPatterns(scopeKey),
       approvedDirectories: this.snapshotApprovedDirectories(scopeKey)
     };
-    await this.sessionApprovalStore.save(sessionId, state);
+    await this.approvalStore.saveSessionState({
+      ...this.sessionScope(sessionId),
+      state
+    });
   }
   hydrateScope(sessionId, state) {
     const scopeKey = this.getScopeKey(sessionId);
@@ -170,7 +196,7 @@ class ApprovalManager {
       if (this.loadedScopes.has(scopeKey)) {
         return;
       }
-      const state = await this.sessionApprovalStore.load(sessionId);
+      const state = await this.approvalStore.loadSessionState(this.sessionScope(sessionId));
       this.hydrateScope(sessionId, state);
       this.loadedScopes.add(scopeKey);
       this.logger.debug("Restored persisted approval state", {
@@ -189,7 +215,7 @@ class ApprovalManager {
     const scopeKey = this.getScopeKey(sessionId);
     await this.runWithScopeLock(scopeKey, async () => {
       this.evictSessionState(sessionId);
-      await this.sessionApprovalStore.delete(sessionId);
+      await this.approvalStore.deleteSessionState(this.sessionScope(sessionId));
     });
   }
   // ==================== Pattern Methods ====================
@@ -468,14 +494,71 @@ class ApprovalManager {
     }
     return details;
   }
+  withDefaultTimeout(details) {
+    return {
+      ...details,
+      timeout: this.getApprovalTimeout(details.type, details.timeout)
+    };
+  }
+  approvalIdentityKey(identity) {
+    return JSON.stringify([
+      identity.runId,
+      identity.turnId,
+      identity.modelStepId,
+      identity.toolCallId
+    ]);
+  }
+  assertMatchingRecordedRequest(existing, candidate) {
+    const existingComparable = {
+      type: existing.type,
+      sessionId: existing.sessionId,
+      hostRuntime: existing.hostRuntime,
+      timeout: existing.timeout,
+      metadata: existing.metadata
+    };
+    const candidateComparable = {
+      type: candidate.type,
+      sessionId: candidate.sessionId,
+      hostRuntime: candidate.hostRuntime,
+      timeout: candidate.timeout,
+      metadata: candidate.metadata
+    };
+    if (!(0, import_node_util.isDeepStrictEqual)(existingComparable, candidateComparable)) {
+      throw import_errors.ApprovalError.invalidRequest(
+        "Approval request conflicts with existing approval request",
+        {
+          approvalId: existing.approvalId,
+          type: existing.type
+        }
+      );
+    }
+  }
   createResponse(request, response) {
     return {
+      status: response.status,
       approvalId: request.approvalId,
       ...request.sessionId !== void 0 ? { sessionId: request.sessionId } : {},
       ...request.hostRuntime !== void 0 ? { hostRuntime: request.hostRuntime } : {},
-      ...response
+      ...response.reason !== void 0 ? { reason: response.reason } : {},
+      ...response.message !== void 0 ? { message: response.message } : {},
+      ...response.timeoutMs !== void 0 ? { timeoutMs: response.timeoutMs } : {},
+      ...response.data !== void 0 ? { data: response.data } : {}
     };
   }
+  parseResponseForRequest(request, response) {
+    switch (request.type) {
+      case import_types.ApprovalType.TOOL_APPROVAL:
+        return import_schemas.ToolApprovalResponseSchema.parse(response);
+      case import_types.ApprovalType.COMMAND_APPROVAL:
+        return import_schemas.CommandApprovalResponseSchema.parse(response);
+      case import_types.ApprovalType.ELICITATION:
+        return import_schemas.ElicitationResponseSchema.parse(response);
+      case import_types.ApprovalType.CUSTOM:
+        return import_schemas.CustomApprovalResponseSchema.parse(response);
+      case import_types.ApprovalType.DIRECTORY_ACCESS:
+        return import_schemas.DirectoryAccessResponseSchema.parse(response);
+    }
+  }
   getElicitationFormData(response) {
     if (response.data && typeof response.data === "object" && "formData" in response.data && typeof response.data.formData === "object" && response.data.formData !== null) {
       return response.data.formData;
@@ -520,7 +603,7 @@ class ApprovalManager {
    * Request a generic approval
    */
   async requestApproval(details) {
-    const request = (0, import_factory.createApprovalRequest)(details);
+    const request = (0, import_factory.createApprovalRequest)(this.withDefaultTimeout(details));
     if (request.type === import_types.ApprovalType.ELICITATION && !this.config.elicitation.enabled) {
       throw import_errors.ApprovalError.invalidConfig(
         "Elicitation is disabled. Enable elicitation in your agent configuration to use the ask_user tool or MCP server elicitations."
@@ -528,8 +611,77 @@ class ApprovalManager {
     }
     return this.handleApproval(request);
   }
+  async recordApprovalRequest(details, identity) {
+    if (details.type === import_types.ApprovalType.ELICITATION && !this.config.elicitation.enabled) {
+      throw import_errors.ApprovalError.invalidConfig(
+        "Elicitation is disabled. Enable elicitation in your agent configuration to use the ask_user tool or MCP server elicitations."
+      );
+    }
+    const approvalId = (0, import_factory.createDeterministicApprovalId)(this.approvalIdentityKey(identity));
+    const request = (0, import_factory.createApprovalRequest)(this.withDefaultTimeout(details), approvalId);
+    return this.runWithApprovalRecordLock(approvalId, async () => {
+      const existing = await this.approvalStore.getRequest({ approvalId });
+      if (existing) {
+        this.assertMatchingRecordedRequest(existing, request);
+        return existing;
+      }
+      const recorded = await this.approvalStore.createRequest({ request });
+      this.assertMatchingRecordedRequest(recorded, request);
+      return recorded;
+    });
+  }
+  async recordApprovalResponse(decision) {
+    const record = await this.recordApprovalResponseRecord(decision);
+    return record.response;
+  }
+  async recordApprovalResponseRecord(decision, expectedRequest) {
+    return this.runWithApprovalRecordLock(decision.approvalId, async () => {
+      const request = await this.approvalStore.getRequest({
+        approvalId: decision.approvalId
+      });
+      if (!request) {
+        throw import_errors.ApprovalError.invalidResponse("Approval response has no recorded request", {
+          approvalId: decision.approvalId
+        });
+      }
+      if (expectedRequest !== void 0) {
+        this.assertMatchingRecordedRequest(request, expectedRequest);
+      }
+      const response = this.parseResponseForRequest(
+        request,
+        this.createResponse(request, decision)
+      );
+      const existing = await this.approvalStore.getResponse({
+        approvalId: decision.approvalId
+      });
+      if (existing) {
+        if (!(0, import_node_util.isDeepStrictEqual)(existing, response)) {
+          throw import_errors.ApprovalError.invalidResponse(
+            "Approval response conflicts with existing approval response",
+            {
+              approvalId: decision.approvalId
+            }
+          );
+        }
+        return { response: existing, status: "replayed" };
+      }
+      const record = await this.approvalStore.saveResponse({ response });
+      if (!(0, import_node_util.isDeepStrictEqual)(record.response, response)) {
+        throw import_errors.ApprovalError.invalidResponse(
+          "Approval response conflicts with existing approval response",
+          {
+            approvalId: decision.approvalId
+          }
+        );
+      }
+      return record;
+    });
+  }
+  async requestApprovalDecision(request) {
+    return this.handleApproval(request);
+  }
   /**
-   * Handle approval requests (tool approval, elicitation, command confirmation, directory access, custom)
+   * Handle approval requests (tool approval, elicitation, command approval, directory access, custom)
    * @private
    */
   async handleApproval(request) {
@@ -549,16 +701,6 @@ class ApprovalManager {
         status: import_types.ApprovalStatus.APPROVED
       });
     }
-    if (mode === "auto-deny") {
-      this.logger.info(
-        `Auto-deny approval '${request.type}', approvalId: ${request.approvalId}`
-      );
-      return this.createResponse(request, {
-        status: import_types.ApprovalStatus.DENIED,
-        reason: import_types.DenialReason.SYSTEM_DENIED,
-        message: `Approval automatically denied by system policy (auto-deny mode)`
-      });
-    }
     const handler = this.ensureHandler();
     this.logger.info(
       `Manual approval '${request.type}' requested, approvalId: ${request.approvalId}, sessionId: ${request.sessionId ?? "global"}`
@@ -570,7 +712,7 @@ class ApprovalManager {
    * Convenience method for tool execution approval
    *
    * TODO: Make sessionId required once all callers are updated to pass it
-   * Tool confirmations always happen in session context during LLM execution
+   * Tool approvals always happen in session context during LLM execution
    */
   async requestToolApproval(metadata) {
     const { sessionId, hostRuntime, timeout, ...toolMetadata } = metadata;
@@ -585,19 +727,19 @@ class ApprovalManager {
     );
   }
   /**
-   * Request command confirmation approval
+   * Request command approval
    * Convenience method for dangerous command execution within an already-approved tool
    *
    * This is different from tool approval - it's for per-command approval
    * of dangerous operations (like rm, git push) within tools that are already approved.
    *
    * TODO: Make sessionId required once all callers are updated to pass it
-   * Command confirmations always happen during tool execution which has session context
+   * Command approvals always happen during tool execution which has session context
    *
    * @example
    * ```typescript
    * // bash_exec tool is approved, but dangerous commands still require approval
-   * const response = await manager.requestCommandConfirmation({
+   * const response = await manager.requestCommandApproval({
    *   toolName: 'bash_exec',
    *   command: 'rm -rf /important',
    *   originalCommand: 'rm -rf /important',
@@ -605,11 +747,11 @@ class ApprovalManager {
    * });
    * ```
    */
-  async requestCommandConfirmation(metadata) {
+  async requestCommandApproval(metadata) {
     const { sessionId, hostRuntime, timeout, ...commandMetadata } = metadata;
     return this.requestApproval(
       this.createApprovalDetails(
-        import_types.ApprovalType.COMMAND_CONFIRMATION,
+        import_types.ApprovalType.COMMAND_APPROVAL,
         commandMetadata,
         sessionId,
         hostRuntime,
@@ -732,7 +874,7 @@ class ApprovalManager {
    * Set the approval handler for manual approval mode.
    *
    * The handler will be called for:
-   * - Tool confirmation requests when permissions.mode is 'manual'
+   * - Tool approval requests when permissions.mode is 'manual'
    * - All elicitation requests (when elicitation is enabled, regardless of permissions.mode)
    *
    * A handler must be set before processing requests if:
@@ -769,7 +911,7 @@ class ApprovalManager {
   ensureHandler() {
     if (!this.handler) {
       throw import_errors.ApprovalError.invalidConfig(
-        'An approval handler is required but not configured.\nHandlers are required for:\n  \u2022 manual tool approval mode\n  \u2022 all elicitation requests (when elicitation is enabled)\nEither:\n  \u2022 set permissions.mode to "auto-approve" or "auto-deny", or\n  \u2022 disable elicitation (set elicitation.enabled: false), or\n  \u2022 call agent.setApprovalHandler(...) before processing requests.'
+        'An approval handler is required but not configured.\nHandlers are required for:\n  \u2022 manual tool approval mode\n  \u2022 all elicitation requests (when elicitation is enabled)\nEither:\n  \u2022 set permissions.mode to "auto-approve", or\n  \u2022 disable elicitation (set elicitation.enabled: false), or\n  \u2022 call agent.setApprovalHandler(...) before processing requests.'
       );
     }
     return this.handler;